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Abstract. We introduce techniques for proving uniform termination of 
graph transformation systems, based on matrix interpretations for string 
rewriting. We generalize this technique by adapting it to graph rewriting 
instead of string rewriting and by generalizing to ordered semirings. In 
this way we obtain a framework which includes the tropical and arctic 
type graphs of [5] and a new variant of arithmetic type graphs. These type 
graphs can be used to assign weights to graphs and to show that these 
weights decrease in every rewriting step in order to prove termination. We 
present an example involving counters and discuss the implementation 
in the tool Grez. 


1 Introduction 

For every computational formalism, the question of termination is one of the 
most fundamental problems, consider for instance the halting problem for Tur¬ 
ing machines. For graph transformation systems there has been some work on 
termination, but this problem has received less attention than, e.g., confluence or 
reachability analysis. There are several applications where termination analysis is 
essential: one scenario is termination of graph programs, especially for programs 
operating on complex data structures. Furthermore, model transformations, for 
instance of UML models, usually require functional behaviour, i.e., every source 
model should be translated into a unique target model. This requires termination 
and confluence of the model transformation rules. 

There is a huge body of termination results in string and term rewriting [2j 
from which one can draw inspiration. Still, adapting these techniques to graph 
transformation is often non-trivial. A helpful first step is often to modify these 
techniques to work with cycle rewriting mm, which imagines the two ends of 
a string to be glued together, so that rewriting is indeed performed on a cycle. 
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In this paper we focus exclusively on uniform termination, i.e., there is only 
a set of graph transformation rules, but no fixed initial graph, and the question 
is whether the rules terminate on all graphs. All variants of the termination 
problem, termination on all graphs as well as termination on a fixed set of initial 
graphs, are undecidable [14] . 

In [5] we have shown how to adapt methods from string rewriting mm and 
to develop a technique based on weighted type graphs, which was implemented in 
the tool Grez. Despite its simplicity the method is quite powerful and finds termi¬ 
nation arguments also in cases which are difficult for human intuition. However, 
there are some examples (see for instance the example discussed in Section [5]) 
where this technique fails. The corresponding techniques in string rewriting can 
be seen as matrix interpretations of strings in certain semirings, more specifically 
in the tropical and arctic semiring. Those semirings can be replaced by the arith¬ 
metic semiring (the natural numbers with addition and multiplication) in order 
to obtain a powerful termination analysis method for string rewriting mm- 

Here we generalize this method to graphs. Due to their non-linear nature, 
we have to abandon matrices and instead state a different termination criterion 
that is based on weights of morphisms of the left-hand and right-hand sides of 
rules into a type graph. Type graphs [6] are a standard tool for typing graph 
transformation systems, but we are not aware of any case where they have been 
used for termination analysis before [51. 

By introducing weighted type graphs we generalize matrix interpretations 
for string rewriting in two ways: first, we transform graphs instead of strings 
and second, we consider general semirings. Our techniques work for so-called 
strictly and strongly ordered semirings, which have to be treated in a slightly 
different way. After introducing the theory we will discuss an extended example, 
followed by a presentation of the implementation in the termination tool Grezo 
All proofs can be found in Appendix [A] 

2 Preliminaries 

2.1 Graphs and Graph Transformation 

We first introduce graphs, morphisms, and graph transformation, in particular 
the double pushout approach 7 ]. In the context of this paper we use edge-labeled, 
directed graphs, but it is straightforward to generalize the results to hypergraphs. 

Definition 1 (Graph). Let A be a fixed set of edge labels. A A-labeled graph 
is a tuple G = (V , E, src, tgt 1 lab), where V is a finite set of nodes, E is a finite 
set of edges, src , tgt: E —>• V assign to each edge a source and a target, and 
lab: E —>• A is a labeling function. 

As a notational convention, we will denote, for a given graph G, its compo¬ 
nents by Vg, Eg, srec, tgt G and labc, unless otherwise indicated. 
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Definition 2 (Graph morphism). Let G , G' be two A-labeled graphs. A graph 
morphism (p: G —> G' consists of two functions ipv '■ Vg —>■ Vg> and pe '■ Eg —> 
Eqi, such that for each edge e £ Eg it holds that srcG'(pE(e)) = Pv{srcG{e)), 
tgt G '{<PE{e)) = (fiv{tgt G {e )) and lab G '{pE{e)) = lab G {e). 

We will often drop the subscripts V, E and simply write p instead of pv ) Ve ■ 
We work with standard double-pushout (DPO) graph transformation [7], Note 
that our termination results would still hold if we restricted to injective matches. 

Definition 3 (Graph transformation). A graph transformation rule p con¬ 
sists of two morphisms L I -vr^> R, consisting of the left-hand side L, the 
right-hand side R and the interface I. We require that I is discrete. 

A match of a left-hand side in a graph G is a morphism m: L —>• G. Given a 
rule p and a match m: L —>• G, a graph H is the result of applying 
the rule at the match, written G => m ,p H (or G => p H if 
m is arbitrary or clear from the context), if there exists 
a graph C and morphisms such that the two squares in 
the diagram on the right are pushouts in the category of 
graphs and graph morphisms. 

A graph transformation system 1Z is a finite set of graph transformation 
rules. For a graph transformation system 1Z, is the rewriting relation on 
graphs induced by those rules. 

fntuitely in a graph transformation step from G to H, the images of all 
elements of the left-hand side L , which are not present in the interface I are 
deleted, and the right-hand side R is added, by gluing it to the interface. 

Although the graph transformation systems themselves are untyped, our 
method for termination analysis is based on type graphs (BJ. For given graphs 
G, T, where T is considered as a type graph , we say that G is typed over T when¬ 
ever there is a morphism t: G —> T. The morphism t will also be called typing 
morphism. We need a way to compose and decompose typing morphisms. 

Lemma 1. Let a pushout PO consisting of objects Go, Gi, G 2 , G be given. Then 
there exists a bijection between pairs of commuting morphisms t \: Gi —>• T, 
^2 ’ G 2 —>• T and morphisms t: G —>• T (see diagram below). 

Gi 

ipi / 1 

G 0 ( po ) G-^T 

^a\, 

g 2 

For each t we obtain a unique pair of morphisms t\,t .2 by composing with and 
P 2 , respectively. Conversely, for each pair t\,t 2 of morphisms withtio^ = t 2 oip 2 
we obtain a unique t: G —>• T as mediating morphism. In this case we will write 
medpo{t\,t 2 ) = t and medf l 0 (t) = (t 1 ,t 2 ). 
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2.2 Matrix Interpretations for String Rewriting 

Our technique is strongly influenced by matrix interpretations for proving termi¬ 
nation in string, cycle and term rewriting systems mm- We will generalize 
this technique, resulting in a technique for graph transformation systems that 
has a distinctly different flavour than the original method. In order to point out 
the differences later and motivate our choices, we will introduce matrix interpre¬ 
tations first. 

We are working in the context of string rewrite systems, where a rule is of 
the form £ —> r, where £, r are both strings over a given alphabet E. For instance, 
consider the rule aa —> aba, which rewrites aaa => abaa => ababa ^ . 

We first start with some preliminaries: let A, B be two square matrices A, B 
over No of equal dimension n. We write A > B if Ai i > Bn and Aij > Bij 
for all indices i,j with 1 < i,j < n, i.e., we require that the entries in the upper 
left corner are strictly ordered, whereas the remaining entries may also be equal. 
It holds that A > B implies A-C > B -C and C -A > C ■ B for a matri>Jf| C > 0 
of appropriate dimension. 

As always in termination analysis strings are assigned to elements in a well- 
founded set and it has to be shown that each rule application leads to a decrease 
within this order. 

Here, every letter of the alphabet a € A is associated with a square matrix 
A = [a] > 0 (where all matrices have the same dimension n). Similarly every 

word w = a\ ... a n is mapped to a matrix [u>] = [ai] . [a n ], which is obtained 

by taking the matrices of the single letters and multiplying them. If we can show 
[£] > [r] for every rule £ —> r, then termination is implied by the considerations 
above and by the fact that the order < on No is well-founded, i.e., there are no 
infinite strictly decreasing chains. 

For the example above take the following matrices (as in El): 



For cycle rewriting a similar argument can be given, which is based on the 
idea that the trace, i.e., the sum of the diagonal, of a matrix decreases [15] . 

A natural question to ask is how such matrices can be obtained. We will 
later discuss how SMT solvers can be employed to automatically generate the 
required weights. 

In the following, we will generalize this method in two ways: we will replace 
the natural numbers by an arbitrary semiring - an observation that has already 
been made in the context of string rewriting - and we will make the step from 
string to graph rewriting. 

2.3 Ordered Semirings 

We continue by defining semirings, the algebraic structures in which we will 
evaluate the graphs occurring in transformation sequences, and orders on them. 
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Here 0 denotes the matrix with all entries zero. 






A (partial) order is a reflexive, transitive and antisymmetric relation. If < 
is an order, then we denote by < its strict subrelation e.g. x < y if and only 
if x < y A x ^ y. An order is well-founded if it does not allow infinite, strictly 
decreasing sequences xq > x± > X 2 > •■■ ■ 

Definition 4. A semiring is a tuple (S, ©, <8>, 0,1), where S is the (finite or 
infinite) carrier set, ( S , ®, 0) is a commutative monoid, (S, ®, 1) is a monoid, ® 
distributes over © and 0 is an annihilator for ®. That is, the following laws hold 
for all x,y,z £ S: 

(x ® y) ® z = x ® (y ® z) 0 © £ = a: 

(x ® y) ® z = x ® (y ® z) x = x 

(x © y) ® z = [x (g> z) © (y <g> z) 1 <8 x = x 

z <S> (x © y) = (z <8> x) © (z 0 y) x ® 1 = x 

A semiring (S, ©,®,0,1) is commutative if® is commutative (that is, ifx®y = 

■y <g> x, for all x,y £ S). 

We will often confuse a semiring with its carrier set, that is, S can refer to 
both the semiring (S, ©, ®, 0,1) and the carrier set S. 

In order to come up with termination arguments, we need a partial order on 
the semirings that has to be compatible with its operations. 

Definition 5. A structure ( S , ©, <8>, 0,1, <) is an ordered semiring if (S, ©, ® , 0,1) 
is a semiring and < £ SxS is a partial order on S such that for all x, y,u,z £ S: 

— x < y implies x © u < y © u, x <g> z < y <S> z and z ® x < z ® y for z > 0. 

The ordered semiring S is strongly ordered, if 

— x < y, z < u implies x © z < y © u; and 

— z > 0, x < y implies x ® z < y ® z and z ® x < z ® y. 

The ordered semiring S is strictly ordered, if in addition x < y implies x © z < 
y®z. 

Example 1. Examples of semirings which play a role in termination proving are: 

— The natural numbers form a semiring (No, +, •, 0,1, <), where < is the stan¬ 
dard ordering of the natural numbers. We will call this semiring the arith¬ 
metic semiring (on the natural numbers). This is a strictly ordered semiring 
because both < and < are monotone in + and • 

— The tropical semiring (on the natural numbers) is: 

T No = (No U {oo}, min, +, oo, 0, <), 

where < is the usual ordering of the natural numbers. The tropical semiring 
is not strictly ordered, because, for example, 2 < 3 but min(l, 2) min(l, 3). 
It is however still strongly ordered. 


x ® 0 = 0 
0 ® x = 0 
x © y = y © x 



— The arctic semiring (on the natural numbers) is 

T No = (N 0 U {—oo}, max, +, -oo, 0, <), 

where < is the normal ordering of the natural numbers. Like the tropical 
semiring, the arctic semiring is not strictly ordered, but strongly ordered. 

All semirings above are commutative. We will in the following restrict ourselves 
to commutative semirings, since we are assigning weights to graphs by multiply¬ 
ing weights of nodes and edges, and nodes and edges are typically unordered. 

3 Weighted Type Graphs 

Similarly to mapping a word to a matrix, we will associate weights to graphs, 
by typing them over a type graph with weights from a semiring. 

Definition 6. Let an ordered semiring S be given. A weighted type graph T 
over S is a graph with a weight function wt ■ Et —>• S and a designated flower 
node j ! ! t £ V, such that for each label A € A there exists a designated edge eA 
with srcT(e-A) = tgt T {eA ) = 'f-T, labr{eA) = A and wt{ca) > 0. 

For a graph G, we denote with fl T (G) (or just fl(G) if T is clear from the 
context) the unique morphism from G to T that maps each node v £ Vq of G to 
the flower node 'fir and each edge e £ Eg, with labr{e) = A, to eA- Note that, 
for a morphism c: G —>• E[, it is always the case that fl T (H) o c = fl T (G ). 

Note that every matrix A of dimension n can be associated with an (unla¬ 
belled) type graph with n nodes, where an edge from node i to j is assigned 
weight A L j (or does not exist if A,;j = 0). Hence our idea of weighted type 
graphs is strongly related with the matrices of Section 12.21 

The node 'fir is also called the flower node, since the loops attached to it look 
like a flower. Those loops correspond to the matrix entries at position (1,1) and 
similar to those entries they play a specific role. Note that the flower structure 
also ensures that every graph can be typed over T (compare with the terminal 
object in the category of graphs, which is exactly such a flower). 

With a bit of notation overloading, we assign a weight to each morphism 
t\ D —>T with codomain T and arbitrary domain D as follows: 

writ) = w T (t(e)). 

e£ED 

That is, we multiply the weights of all edges in the image of t with respect to (8). 

Finally, the weight of a graph G with respect to T is defined by summing up 
the weights of all morphisms from G to T with respect to ©: 

wt{G) = ^ w T {t G )- 

t G : G—>T 

The subscript T of Wr will be omitted if clear from the context. 


Example 2. We give a small example for the weight of a graph. 


Consider for instance the type graph T. Edges are 
labelled a, b and the weights, in this case natural num¬ 
bers, are given as superscripts. Consider also the left- T = 
hand side L of rule p below, consisting of two a-edges 
(the graph rewriting analogue of the string rewriting 
rule aa —> aba considered in Section & There are five morphisms L —> T, 
each having weight 1, as they are calculated by multiplying the weights of two 
a-edges which also have weight 1. Hence the weight of L with respect to T is 
wt{L) = 14-1 + 1 + 1 + 1 = 5. More details on this are given in Example [3] 




If we glue two graphs G\ , G 2 in order to obtain G, the weight of G can be 
obtained from the weights of G \, G 2 . 


Lemma 2 (Properties of weighted type graphs). Let S be an ordered com¬ 
mutative semiring and T a weighted type graph over S. 


(i) Whenever S is strongly ordered, for all 
graphs G, fl T (G): G —» T exists and 
w T {fl T {G )) > 0. 

(ii) Given the following diagram, where the 
square is a pushout and Go is discrete, it 
holds that wt (ft) = wt (t ° + 1 ) <8> wt (t 0 + 2 ) ■ 


G, 



T 


G 2 


Since property © above only holds if Go is discrete we restrict to discrete 
graphs I in the rule interfaced 

While the process of obtaining the weight of a graph corresponds to calcu¬ 
lating the matrix of a word and summing up all its entries, we also require a 
way to be more discriminating, i.e., to access separate matrix entries. Evaluating 
a string-like graph would mean to fix its entry and exit node within the type 
graph (similarly to fixing two matrix indices). However, in graph rewriting, we 
have interfaces of arbitrary size. Hence, we do not index over pairs of nodes, 
but over arbitrary interface graphs, and compute the weight of a graph L with 
respect to a typed interface I. 


Definition 7. Let <p: I —»• L and t: I —»• T be graph 
weighted type graph. We define: 


w t (v) = 5 Z w t (* l )- 

ti_, : L—>T 

tLOlp=t 


morphisms, where T is a 


L 


Z-I 



t 


T 


Compare also with the “stable under pushouts” property of [5]. 

















Finally, we can define what it means that a rule is decreasing, analogous to 
the condition [£} > [r] introduced in Section 12.21 In addition we also introduce 
non-increasingness, a concept that will be needed in the following for so-called 
relative termination arguments. 

Definition 8. Let a rule p = L^vl-I-vr^R, an ordered commutative semiring 
S and a weighted type graph T over S be given. 

(i) The rule p is non-increasing if for allti: I —> T it holds that > 

w tl (<PR)- 

(ii) The rule p is decreasing if it is non-increasing, andwfl^fpjf) > 

Example 3. We come back to Example [5] and check whether rule p is decreasing. 
For this we have to consider the following four morphisms t: I —> T from the 
two-node interface into the weighted type graph T: 

— The flower morphism /?(/) which maps both interface nodes to the left node 

of T. In this case we have = 2 > 1 = Wfl^(ipn). 

— Furthermore there are three other morphisms f i, t 2 > t .3 : I — > T mapping the 

two interface nodes either both to the right node of T, or the first interface 
node to the left and the second interface node to the right node of T, or vice 
versa. In all these cases we have w^^l) = 1 = (</?#). 

Hence, the rule is decreasing. Note also that these weights correspond exactly to 
the weights of the multiplied matrices in Section 12.21 

Finally, we have to show that applying a decreasing rule also decreases the 
overall weight of a graph. For a non-increasing rule the weight might also remain 
the same. 

Lemma 3. Let S be a strictly ordered commutative semiring and T a weighted 
type graph over S. Furthermore, let p be a rule such that G => p H. 

(i) If p is non-increasing, then wt{G) > wt(H). 

(ii) If p is decreasing, then wt(G) > wt{H). 

From this lemma we can prove our main theorem that is based on the well- 
known concept of relative termination mm- if we can find a type graph for 
which some rules are decreasing and the rest is non-increasing, we can remove the 
decreasing rules without affecting termination. We are then left with a smaller 
set of rules for which termination can either be shown with a different type graph 
or with some other technique entirely. 

Theorem 1. Let S be a strictly ordered commutative semiring with a well- 
founded order < and T a weighted type graph over S. Let R be a set of graph 
transformation rules, partitioned in two sets R < and R~. Assume that all rules 
of R K are decreasing and all rules of R~ are non-increasing. Then R is termi¬ 
nating if and only if R = is terminating. 

A special case of the theorem is when R~ = 0. Then the statement of the 
theorem is that a graph transformation system R is terminating if all its rules 
are decreasing with respect to a strictly ordered commutative semiring S and 
type graph T over S. 




4 Using Strongly Ordered Semirings 


In the last section the semirings were required to be strictly ordered. In this 
section we consider what happens when we weaken this requirement and also 
allow non-strictly ordered semirings, which must however be strongly ordered. 
This allows us to work with the tropical and arctic semiring. It turns out that 
we obtain similar results to above if we strengthen the notion of decreasing. 

Definition 9. Let a rule p = L^vl-I-<pr^R, an ordered commutative semiring 
S and a weighted type graph T over S he given. The rule p is strongly decreasing 
(with respect to T) if for all tj: I —»• T it holds that Wt;(<PL) > uitiivii)- 

Using this new notion of decreasingness we can also formulate a termina¬ 
tion argument, which is basically equivalent to the termination argument we 
presented in J5J. 

Lemma 4. Let S be a strongly ordered commutative semiring and T a weighted 
type graph over S. Furthermore, let p be a rule such that G => p H. 

(i) If p is non-increasing, then wr(G) > wr(H). 

(ii) If p is strongly decreasing, then wr(G) > Wr{H). 

Now it is easy to prove a theorem analogous to Theorem [T] using Lemma [4] 
instead of Lemma [3] 

Theorem 2. Let S be a strongly ordered commutative semiring with a well- 
founded order < and T a weighted type graph over S. Let R be a set of graph 
transformation rules, partitioned in two sets R < and R~. Assume that all rules 
of R< are strongly decreasing and all rules of R = are non-increasing. Then R is 
terminating if and only if R = is terminating. 

In this way we have recovered the termination analysis from one of our earlier 
papers [5], however spelt out differently. In order to explain the connection, let 
us consider what it means for a rule p = L I -v>r-> R to be non-increasing 
in the tropical semiring where © is min and ® is +: for each t: I —> T into a 
weighted type graph T it must hold that 

min wtUl ) > min wtUr) 

tL '. L—tT tR : R—>T 

t L o<p L =t t R 0(fi R =t 

where Write) is the weight of the morphism tL, obtained by summing up (via 
+) the weights of all edges in the image of t l- 

A different way of expressing that the minimum of the first set is larger or 
equal than the minimum of the second set, is to say that for each morphism 
tL : L —> T with tLoipL = t there exists a morphism tR : R — >■ T with tR o ipR — t 
and Wr(tL) > wr(t,R). And this is exactly the notion of tropically non-increasing 

of El- 

Comparing the results of Theorems |T] and [2] we notice the following: as un¬ 
derlying semiring S we can take either a strictly ordered or a strongly ordered 


one, but if we choose a strongly ordered semiring, the termination argument 
becomes slightly weaker because for every morphism from the left-hand side to 
the type graph there must exist a compatible, strictly smaller morphism from 
the right-hand side to the type graph. 


5 Examples 


We give examples to show that with a weighted type graph over a strictly ordered 
semiring (such as the arithmetic semiring), we can prove termination on some 
graph transformation systems where strongly ordered semirings fail. We start 
with a graph transformation system for which a termination argument can be 
found using both variants. Then we will modify some rules and explain why 
weighted type graphs over strongly ordered semirings can not find a termination 
argument for the modified system. 


Example 4- As an example we take a system consisting of several counters, which 
represent their current value by a finite number of bits. Each counter may possess 
an incr marker, that can be consumed to increment the counter by 1. 

One possible graph describing 
a state of such a system is given 
by G. This is just one possible ini¬ 
tial graph, since we really show 
uniform termination, i.e., terrni- ^ 
nation on all initial graphs, even 
those that do not conform to the 
schema indicated by G. 

We consider the graph transformation system {pi, p 2 , P 3 , Pa}, adapted from 
[15] , consisting of the following four rules: 



Pi 


P2 


P3 

P4 



Each counter may increment at most once. Rules pi and p 2 specify that a 
counter (represented by a cownt-labelled edge) may increment its least significant 
bit by 1 if an incr marker was not consumed yet. If the least significant bit is 1, 
the bit is marked by a label c, to remember that a carry bit has to be passed to 
the following bit. Rule p-$ increments the next bit of the counter by 1 (if it was 
0 before), while rule p 4 shifts the carry bit marker over the next 1. 



















































Ttrop — 



count 0 


The fact that this graph transformation system 
is uniformly terminating can be shown using a 
weighted type graph over either a strictly or 
strongly ordered semiring. For example, using a 
non-relative termination argument, we evaluate the 
rules with respect to the weighted type graph T tr0 p over the tropical semiring. 

A relative termination argument is even easier: the rules p\ and P 2 can be re¬ 
moved due to the decreasing number of mcr-labelled edges. Then we can remove 
P 3 due to the decreasing number of c-labelled edges (which remain constant in 
Pi) and afterwards remove pi since it decreases 1-labelled edges. With all rules 
removed, the graph transformation system has been shown to terminate uni¬ 
formly. 

We now consider the arithmetic semiring and again 
use a non-relative termination argument: we evaluate 
the rules with respect to the weighted type graph 
Tarit , where all weights are just increased by one with 
respect to T tr 0 p- That is due to the fact, that we are 
working in the arithmetic semiring and hence have to make sure that all weights 
of flower edges are strictly larger than 0 . 


J-m'it — 



Example 5. We will now modify rules p\ and p 2 in order to give an example 
where weighted type graphs over tropical and arctic semirings fail to find a 
termination argument. 

Consider the graph transformation system {pi, p^ P 3 , P 4 } consisting of rules 
P 3 and pi from Example 0] with two additional new rules: 


Pi 

P 2 

Ps 

P\ 



(= P3) 

(= P4) 


With respect to Example [4j the counter may increment its value not only once 
but several times, until the least significant bit is permanently marked by the 
carrier bit label c. This will eventually happen, since counters are never extended 
by additional digits and carry bits finally accumulate and can not be processed. 

We now give a relative termination argument, to show uniform termination of 
this graph transformation system. The termination of this system is not obvious 
as the numbers of the labels c, 0 and 1 increase and decrease depending on the 
rules used for the derivation. 
















































count 1 


O' 


First, we evaluate the rules with respect 
to the following weighted type graph T' 
over the arithmetic semiring. Consider for j 1 ' 
instance rule p\ and the following four in¬ 
terface morphisms: 

— to = fl(I): I —> T' is the flower morphisms and maps both interface node to 
the left node of T'. In this situation we have Wt 0 (<fiL) = l- l + l- 2 = 3> 
2 = 1-1 + 1-1 = wt 0 (<Pr) (there are two ways to map the left-hand side in 
such a way that both interface nodes are mapped to the left node, resulting 
in weight 3; similar for the right-hand side, where we obtain weight 2). 

— ti: I —> T' is the morphism that maps the first interface node to the right 
node of T' and the second interface node to the left node of T'. In this case 
we have w tl = l- 2 = 2>2 = l- 2 = w tl (<Pr)- 

— t 2 '■ I —> T' is the morphism that maps the first interface node to the left 
node of T' and the second interface node to the right node of T'. In this case 
we have w t2 {'*Pl) = 0 > 0 = Wt 2 (<PR ), since there are no possibilities to map 
either the left-hand or the right-hand side. 

— to : I —^ T r is the morphisms that maps both interface node to the right node 
of T. Here we have Wt 3 {(pL) = 0 > 0 = wt 3 {<PR.) (again, there are no fitting 
matches of the left-hand and right-hand side). 

Hence p\ is decreasing. Similarly we can prove that p ' 2 is decreasing and p ' 3 , p\ are 
non-increasing, which means that p\ , p 2 can be removed. To show termination 
of the remaining rules p 3 ,P 4 we can simply use the weighted type graph T ar a 
from Example 0] again. 

We found a relative termination argument for Example [5] using a weighted 
type graph over the arithmetic semiring. However, there is no way to obtain a 
termination argument with a weighted type graph over either tropical or arctic 
semirings: in these cases the weight of any graph is linear in the size of the graph 
(since we use only addition and minimum/maximum to determine the weight of 
a graph). If we have an interpretation where at least one rule is decreasing, 
and the other rules are non-increasing, then in any derivation, the number of 
applications of the decreasing rules is at most linear in the size of the initial 
graph. However, if we start with a counter which consists of n bits (all set to 0), 
we obtain a derivation in which all of the rules are applied at least 2 n times. 

This means that it is principally impossible to find a proof with weighted 
type graphs over the tropical or arctic semiring, even using relative termination. 

The last two examples were inspired by string rewriting and the example rules 
could easily be encoded into a string grammar. We give another final example 
and prove termination using a weighted type graph over the arithmetic semiring. 
We now switch from strings to trees, staying with a scenario where reductions of 
exponential length are possible. In addition we discard the cormf-label as each 
counter will be represented by a node with no incoming edge and we will exploit 
the dangling edge condition. 





Example 6. In the next example we interweave our counters into a single treelike 
structure. Each path from a root node to a leaf can be interpreted as a counter. 

One possible graph describing a state 
of the modified system is given by G. Each 
counter shares a number of bits with other 
counters, where the least significant bit is 
shared by all counters. Again this is just 
one possible initial graph, since we prove 
uniform termination. 

Let the following graph transformation system {/5j, pi, ph, pi, ph, ph} be given: 

Pi = 

P3 = 


P5 = 


The rules pi and pi increment the shared least significant bit by 1. These 
two rules can only be applied at the root of the tree (due to the dangling edge 
condition of the DPO approach), as long as the edge is either labelled 0 or 1. By 
applying the rules p's ,..., p's, a carrier bit can be passed to the next bit. Proving 
termination of this graph transformation system is non-trivial. By applying for 
instance pq, the value of the counters containing interface node I does not change, 
while other counter values decrease. 

We evaluate the rules with respect to the 
following weighted type graph T over the 
arithmetic semiring. We can prove that pi 
and pi are decreasing and ph,...,ph are 
non-increasing, which means that pi, pi 
can be removed using a relative termination argument. 

The rules pi and pi can be removed due to the decreasing number of c-labelled 
edges, which remain constant in p^ and ph. Afterwards we can remove pi, pe since 
they decrease the number of 1-labelled edges. The graph transformation system 
has been shown to terminate uniformly, since there are no rules left. 

6 Finding Weighted Type Graphs and Implementation 

The question of how to find suitable weighted type graphs has been left open so 
far. Instead of manually searching for a suitable type graph we employ a satisfi- 
able modulo theories (SMT) solver (in this case Z3) that can solve inequations 
over the natural numbers. 








We fix a number n of nodes in the type graph and proceed as follows: take 
a complete graph T with n nodes, i.e., a graph with an edge for every pair 
i,j £ {1,..., n} of nodes and every edge label a € A. Every edge e in this graph 
is associated with a variable x e . The task is to assign weights to those variables 
such that rules can be shown as either decreasing or non-increasing. 

Now, for every rule p = L I R and every map t: I T we obtain 
an inequation: 


e n x t L {e) A e n x t R (e) 


tz, • L—yT e£EL 
tLO^pL—t 


tR : R—yT e£ER 

tRO^>R=t 


If we want to show that p is decreasing and t is the flower morphism > has to 
be replaced by >. 

Doing this for each rule and every map t gives us equations that can be used as 
input for an SMT-solver. We consider the weights as natural numbers only up to a 
given bound by restricting the length of the corresponding bit-vectors. Note that 
we would be outside the decidable fragment of arithmetics otherwise since the 
equations would contain multiplication of variables (as opposed to multiplication 
of constants and variables). By using a bit-vector encoding the SMT-solver Z3 
can reliably find a solution (if it exists) and especially such solutions are found 
for the examples discussed in Section [5] Any solution gives us a valid weighted 
type graph. 

A prototype Java-based tool, called Grez , has been written and was intro¬ 
duced in [5]. Given a graph transformation system TZ, the tool tries to automat¬ 
ically find a proof for the uniform termination of TZ. The tool supports relative 
termination and runs different algorithms (which are chosen by the user) con¬ 
currently to search a proof. If one algorithm succeeds in finding a termination 
argument for at least one of the rules, all processes are interrupted and the cor¬ 
responding rule(s) will be removed from TZ. The algorithms are then executed 
on the smaller set of rules and this procedure is repeated until all rules have 
been removed. Afterwards Grez generates the full proof which can be saved as 
a PDF-file. 

Grez provides both a command-line interface and a graphical user interface. 
The tool supports the integration of external tools, such as other termination 
tools or SMT-solvers. Grez can use any SMT-solver which supports the SMT- 
LIB2 format [T[. Grez generates the inequation described above in this format 
and passes it, either through a temporary file or via direct output stream, to the 
SMT-solver. The results are parsed back into the termination proof, as soon as 
the SMT-solver terminates and produces a model for the formula. 

We ran the tool on all examples of this paper using a Windows workstation 
with a 2,67 Ghz, 4-core CPU and 8 GB RAM. All proofs were generated in less 
than 1 second. The tool, a user manual and the examples from this paper 


can be downloaded from the Grez webpaf 



' www.ti.inf.uni-due.de/research/tools/grez 



7 Conclusion 


We have shown how to generalize the tropical and arctic weighted type graphs 
of 0 to weighted type graphs over general semirings and their application to the 
termination analysis of graph transformation systems. This enables us to work 
in the arithmetic semiring and to prove termination of systems that could not 
be handled with previous approaches. Note that arithmetic type graphs do not 
subsume previous termination analysis methods, but rather complement them. 
In practice one should always try several methods in parallel threads, as it is 
done in our termination tool Grez. 

Related Work. As already mentioned in the introduction, there is some work 
on termination analysis for graph transformation systems, often using rather 
straightforward counting arguments. Some work is specifically geared to the 
analysis of model transformations, taking for instance layers into account. 

The paper [3] considers high-level replacement units (hlru), which are trans¬ 
formation systems with external control expressions. The paper introduces a 
general framework for proving termination of such hlrus, but the only concrete 
termination criteria considered are node and edge counting, which are subsumed 
by the weighted type graph method (for more details see 0). 

In [8j layered graph transformation systems are considered, which are graph 
transformation systems where interleaving creation and deletion of edges with 
the same label is prohibited and creation of nodes is bounded. The paper shows 
such graph transformation systems are terminating. 

Another interesting approach encodes graph transformation systems into 
Petri nets [16] by introducing one place for every edge label and transform¬ 
ing rules into transitions. Whenever the Petri net terminates on all markings, 
we can conclude uniform termination of the original graph transformation rules. 
Note that the second example of Section [5] can not be handled in this way by 
Petri netsU On the other hand m can handle negative application conditions 
in a limited way, a feature we did not consider here. 

Another termination technique via forward closures is presented in m- Note 
that the example discussed in this paper (termination of a graph transformation 
system based on the string rewriting rules ab —> ac, cd —> db) can be handled by 
our tool via tropical type graphs. 

Future Work. Naturally, integration of (negative) application condition is an 
interesting direction for future work. Furthermore we have already started to 
work on techniques for pattern counting. Here we are interested in deciding, 
whether a given rule p always decreases the number of occurrences of a given 
subgraph P. 

Another area of future research that might be of great interest is non-uniform 
termination analysis, i.e., to analyse whether the rules terminate only on a re¬ 
stricted set of graphs. In applications it is often the case that rules do not always 
terminate, but they terminate on all input graphs of interest (lists, cycles, trees, 


Starting with three edges labelled 0,1, count, rule p 2 transforms them into three 
labels 0, c, count, which, via rule ps, are again transformed into 0,1, count. 



etc.). For this, it will be necessary to find a suitable way to characterize graph 
languages that is useful for the application areas and integrates well with termi¬ 
nation analysis. 
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A Proofs 


Lemma [1] Let a pushout PO consisting of objects Go, Gi, G2, G be given. Then 
there exists a bijection between pairs of commuting morphisms t \: G\ —> T, 
G ■ G 2 —> T and morphisms t: G —> T (see diagram below). 



G 0 (po) G —T 



For each t we obtain a unique pair of morphisms ti,t 2 by composing with tpi and 
tp 2 , respectively. Conversely, for each pair t\,t 2 of morphisms withtioifi = f 2 °V ’2 
we obtain a unique t: G —> T as mediating morphism. In this case we will write 
medpo(ti,t 2 ) = t and med~f l 0 (t ) = (G,G)- 

Proof. It is straightforward to verify that medpo and medpg are indeed inverse 
to each other and hence both are bijections. □ 

Lemma [2] (Properties of weighted type graphs). Let S be an ordered 
commutative semiring and T a weighted type graph over S. 

(i) Whenever S is strongly ordered, for all G 1 

graphs G, flp(G): G —» T exists and 
w T (fl T (G)) > 0. 

(ii) Given the following diagram, where the 

square is a pushout and Gq is discrete, it 4 > 2 \ /^ 2 

holds that wp(t ) = wpwp(totp 2 ). G 2 

Proof. 

(i) flp(G ) exists by construction. Furthermore, since wp(e) > 0 for all edges 
in the range of fl T (G), it holds that flp(G) > 0. 

(ii) Since Go is discrete and the square is a pushout, the edge set Eg is (iso¬ 
morphic to) the disjoint union of Eq 1 and Eq 2 . Thus: 

wr{t) = JJ wr(*(e)) = w T ((t o ipi)(e)) ® JJw T ((^ o ip 2 )(e)) 
eE.Ec eEEc 1 eEEc 2 

= Wp(t O ifii) ® Wp(t o ip 2 ), 


Go 


(po) G 


T 


as required. □ 

Lemma [3j Let S be a strictly ordered commutative semiring and T a weighted 
type graph over S. Furthermore, let p be a rule such that G => p H. 

(i) If p is non-increasing, then wp(G) > wp(H). 

(ii) If p is decreasing, then wp(G) > wp(H). 


Proof. Let p = L < -<pl- I -¥> h -> R. The rewriting step G => p H is depicted below 
on the left. 

For every possibility to type G via tG'- G —> T, there exists a morphism 
t c = tG°ipL- C ^ T and we obtain as mediating morphism of the 

right-hand pushout PO 2 (see diagram on the right). 



Now we have (compare with the diagram above on the right): 


w t {G) = Y w (tG ) (!) 

ta ■■ G^T 

= E E w(medp 0l {tc,tL )) (2) 

t(j C — yT t[_,L — yT 
tLoipL=tc°c 

= E E (w(t L ) ® w(t c )) (3) 

t(j \ C — yT tL L — yT 

tL°<PL=t C OC 

= E Y w (^)) ( 4 ) 

t(j C — yT tz_,L — yT 

tL ol PL = tc oc 

= E (^(ic) ® WtcociPL)) (5) 

to ■■ c^t 


where © follows from the fact that med is a bijection (see Lemma [T|), © is an 
application of the equation w(t) = w(t o tpi) ® w(t o ip 2 ) of Lemma [3J © follows 
from distributivity and © holds by definition. Symmetrically, we have 


wt(H) = Y, (w(tc)®w tc OC (<pr))- 
to : C—>T 

Using this, we can prove the two parts of the lemma. 

(i) Since p is non-increasing, it holds by definition that Wtc°c{PL) > WtcociPfi) 
for all tc : C —> T, and thus w(tc)®w tcoc (ipL) > w{tc)® w t c o C {PR)- From 
this it follows that wt{G) > wt{H). 

(ii) Since p is decreasing, and thus non-increasing, it holds by definition that 
wtcocipif) > wt c °c(pR) for all tc'.C^T. Additionally, it holds by as¬ 
sumption that Wfl(i)(ipL) > Wfl^i)(tpR). Since wr{fl{C )) > 0 by definition, 
and S' is a strictly ordered semiring, we have that 


wrifliC)) ®Wfl(i)(ip L ) > w T {fl{C))®Wfl^){ip R ) 

















(we take tc = fl(C) and tc ° c = fl(I))- From these two facts it follows 
that wt(G) > Wt(H) (again using the fact that S is a strictly ordered 
semiring). □ 

Theorem [1} Let S be a strictly ordered commutative semiring with a well- 
founded order < and T a weighted type graph over S. Let R be a set of graph 
transformation rules, partitioned in two sets R < and R = . Assume that all rules of 
i? < are decreasing and all rules of R~ are non-increasing. Then R is terminating 
if and only if R = is terminating. 

Proof. (=>): It is an immediate consquence of R being terminating that its subset 
R = is also terminating. 

(<=): For a rule p and transition G => r H, it holds, by Lemma [3J that 
wt{G) > wt(H) if p € R K and wt(G) > wt{H) if p e R = . From this it 
follows that each infinite transition sequence of R ends in an infinite transition 
sequence of Rr, which do not exist by assumption. □ 

Lemma [4l Let S be a strongly ordered commutative semiring and T a weighted 
type graph over S. Furthermore, let p be a rule such that G => p H. 

(i) If p is non-increasing, then wt(G) > wt{H). 

(ii) If p is strongly decreasing, then Wt(G) > wt{H). 

Proof. The proof proceeds analogously to the proof of Lemma[51 For non-increasing 
rules the proof is exactly the same. 

For strongly decreasing rules we have to show 

{w{tc)®Wt c °c{pL)) > Y ( w(tc ) ® Wt c oc (Pr)) 
tc C—vT tc '• C — yT 


This holds since Wt c oc{pL) > Wtc°c{pR) for all tc, hence the properties of 
strongly ordered semirings allow us to conclude. □ 


